Currently the sw script retrieval can't be aborted, is scoped to specific protocols and not compatible with Subresource Integrity (SRI) and other features.
Here I'm proposing a solution that would allow to verify the sw script after download and before installing, please take a look if you have the time, any feedback is appreciated, thanks !
https://github.com/w3c/ServiceWorker/issues/1720
